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Amendment s to the C laim? 

This listing of claims will replace all prior versions and listings of claims in the application: : 
Listing of claiipq- 

1-11. (cancel) 

1 2. (new) A method for verifying a signature for a message m in a data communication . 
system established between a sender and a recipient, said sender generating; masked signature 
components (r, s, c), where r is an integer derived from a coordinate of a firjrt short term public 
key kP, s is a signature component derived by binding a second short term private key, the 
message m and short and long term private keys, and c is a second signature component obtained 
by combining said first and second short term private keys, said method comprising the stepsiof . 
a verifier: 

a) obtaining a pair of signature components (J, r) , said component s being derived 
from said first and second signature components generated by a signor; 

b) recovering a coordinate pair (xi.yi) corresponding to said first short term public 
key kP using said pair (s, r) and said message m; 

c) calculating a signature component f from one of said coordinate pairs; and , 

d) verifying said signature if r 1 « r. 

13. (new) A method according to claim 12 further comprising the step of said verifier 
receiving (r, s, c) from said signor and converting (s, r, c) to obtain said pair 1(1, r) . 

14. (new) A method according to claim 1 2 further comprising the step of said signor 
converting (s, r, c) to said pair (I, r) and said signor sending said pair (J, r) to said verifier, i 

15. (new) A method according to claim 12 wherein said coordinate pair (x,, yi ) is calculated 
using a pair of values u and v, said values u and v derived from said pair (J, r) and said message 
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16. (new) A method according to claim 15 wherein said coordinate pair (xi,y,) is calculated 
as (x!,y,) = uP + \Q, wherein P is a point on an elliptic curve E and Q is a|public verification ; 
key of said signor derived from P as Q = dp. 

17. (new) A method according to claim 15 wherein said value u is computed as 

u = s -'emod* and said value v is computed as v = rVmodn , e being a representation of said; 
message m. 

1 8. (new) A method according to claim 1 7 wherein e is calculated as e H(m), H( ) being a I 
hash function of said signor and being known to said verifier. ' 

19. (new) A method according to claim 1 2 wherein said coordinate xj isj first converted to an 
integer x, prior to calculating said component r' . 

20. (new) A method according to claim 1 9 wherein said component r' is calculated as 
r'~ x, modn . 

2 1 . (new) A method according to claim 1 2 wherein prior to calculating skid component r\ , 
said coordinate pair (x,, yi ) is first verified, whereby if said coordinate pair (x,, yi ) is a point at 
infinity, then said signature is rejected. 
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